This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: CXNWBvxDk77LgU44jB7NAFmvChPzDNfk4DpN6A3fLFM= Subject key identifier: 49:72:73:8D:97:BC:44:24:99:D3:CF:23:41:96:4A:2C:C2:13:7B:BE Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 12DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 12CB Signing time: Mon 22 Dec 2025 16:46:11 +0000 Manifest this update: Mon 22 Dec 2025 16:46:11 +0000 Manifest next update: Mon 29 Dec 2025 16:46:11 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: WxtMLcnAGjELLCRTWMnzC3FTY7+CxWVTmeFP7CMYXkY=) 2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: S7qopPNPvDDhohJ5GF/e64A8sjKuyyCv3KgOWSOnrzg=) 3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: Xp+CN4LqcT/0Y+vEkAwmxb+Nkk14BBORVU2fsmUOWF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4831 (0x12df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Dec 22 16:46:11 2025 GMT Not After : Dec 29 16:46:11 2025 GMT Subject: CN=694975d3-4262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:e5:92:dd:12:bd:55:ef:9e:bd:a7:b2:86: 7d:58:9f:ad:0b:71:4d:51:98:cd:c9:86:06:f5:63: 75:d2:41:72:c4:bc:de:33:1d:f4:56:b8:a8:7d:27: a6:e2:d3:65:49:3a:73:df:f7:a0:eb:16:6f:9a:4b: e7:8f:9a:7f:f0:79:99:b9:22:90:c0:7d:db:6d:3e: 6b:96:a3:79:2c:3c:10:e6:2b:25:87:86:32:9a:e8: 88:a2:ff:15:c7:64:4e:7f:6b:13:8d:12:9e:58:d4: 55:f4:dd:37:4c:b1:8a:66:d9:85:86:ec:ad:e9:92: 29:e6:b0:af:87:0c:78:a7:bf:9a:2a:66:0a:bc:e3: e5:9f:7c:0d:b6:33:7d:79:c7:f0:be:85:c1:e9:89: bb:35:3f:7b:fe:13:aa:56:d6:6e:7d:57:d2:81:4f: 19:6a:d8:8f:3d:b8:21:de:7b:21:07:2b:4b:0b:aa: b8:b6:e8:22:2c:ff:50:6f:30:ee:00:d8:23:23:aa: 2f:0b:4d:2f:aa:e8:81:79:04:31:e4:79:c0:3c:56: f0:ba:4f:86:fe:52:ea:22:5f:e1:09:ba:08:b1:3d: 42:d4:6f:2d:16:ca:5e:bc:7c:04:82:d2:74:8c:3c: c1:a1:55:c3:15:dc:0a:44:1d:b1:26:ab:e7:c3:19: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:72:73:8D:97:BC:44:24:99:D3:CF:23:41:96:4A:2C:C2:13:7B:BE X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:89:7f:46:4f:5e:cb:42:31:3b:81:e6:b1:9f:f7:e2:36:10: 5e:3b:65:44:a8:cf:09:67:ce:98:1c:9b:69:75:b4:34:5d:fd: 1d:ac:54:ca:6d:22:39:db:99:b5:d5:36:b8:f9:df:c5:af:35: 38:c5:3e:3e:c5:16:76:49:a2:b4:06:ff:29:c9:49:e9:05:46: 09:4d:e3:7d:98:9a:5c:51:0a:2c:95:43:cd:18:17:da:4d:f7: 64:1f:ef:f2:10:03:9d:ef:de:fc:02:8e:bf:52:e1:ea:ff:aa: c5:ee:fa:f3:b4:b8:37:3a:96:7c:2f:37:cb:24:37:53:8d:39: 5e:80:14:27:2b:00:2b:77:02:87:28:f7:51:51:fe:40:99:3d: 1f:74:1c:bf:d9:cc:ff:59:b0:0a:c5:9d:3f:7e:a7:26:6a:93: 0d:a4:a5:b9:9f:c1:53:91:10:ee:6e:4c:d6:28:96:de:7d:ed: 23:ce:71:e3:53:3e:e9:37:53:16:fa:b5:34:52:30:f2:2b:2f: 8d:e9:00:9a:9a:ee:a5:59:44:30:5d:f9:3a:57:a8:b5:01:58: d7:da:89:5e:8a:2b:33:84:6e:60:31:f7:69:65:1a:46:d8:51: 31:04:53:62:08:1f:74:af:b2:68:23:bf:7e:f5:01:df:c4:fe: fb:dd:20:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUxMjIyMTY0NjExWhcNMjUxMjI5MTY0NjExWjAYMRYwFAYD VQQDDA02OTQ5NzVkMy00MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMHlkt0SvVXvnr2nsoZ9WJ+tC3FNUZjNyYYG9WN10kFyxLzeMx30VriofSem 4tNlSTpz3/eg6xZvmkvnj5p/8HmZuSKQwH3bbT5rlqN5LDwQ5islh4YymuiIov8V x2ROf2sTjRKeWNRV9N03TLGKZtmFhuyt6ZIp5rCvhwx4p7+aKmYKvOPln3wNtjN9 ecfwvoXB6Ym7NT97/hOqVtZufVfSgU8ZatiPPbgh3nshBytLC6q4tugiLP9QbzDu ANgjI6ovC00vquiBeQQx5HnAPFbwuk+G/lLqIl/hCboIsT1C1G8tFspevHwEgtJ0 jDzBoVXDFdwKRB2xJqvnwxke5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElyc42X vEQkmdPPI0GWSizCE3u+MB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAliX9GT17LQjE7geaxn/fiNhBeO2VEqM8JZ86YHJtpdbQ0Xf0drFTK bSI525m11Ta4+d/FrzU4xT4+xRZ2SaK0Bv8pyUnpBUYJTeN9mJpcUQoslUPNGBfa TfdkH+/yEAOd7978Ao6/UuHq/6rF7vrztLg3OpZ8LzfLJDdTjTlegBQnKwArdwKH KPdRUf5AmT0fdBy/2cz/WbAKxZ0/fqcmapMNpKW5n8FTkRDubkzWKJbefe0jznHj Uz7pN1MW+rU0UjDyKy+N6QCamu6lWUQwXfk6V6i1AVjX2oleiiszhG5gMfdpZRpG 2FExBFNiCB90r7JoI79+9QHfxP773SA+ -----END CERTIFICATE-----Generated at Tue Dec 23 06:42:30 2025 by rpki-client